diff --git a/docs/concepts/2026-07-29-memory-impl-plan.md b/docs/concepts/2026-07-29-memory-impl-plan.md
index 7fe7b992def4..580a723d7fe5 100644
--- a/docs/concepts/2026-07-29-memory-impl-plan.md
+++ b/docs/concepts/2026-07-29-memory-impl-plan.md
@@ -452,8 +452,10 @@ current implementation head:
 - [ ] Phase 0 exposes no trusted-context factory or enforcement admission path;
       tool JSON, prompt text, plugin extras, and caller-assembled objects
       therefore cannot opt into or modify an enforced authorization plan.
-- [ ] Every selected backend must declare authorization capabilities, and the
-      conformance suite rejects a context-free backend in enforced mode.
+- [ ] Shadow inspection records whether the selected backend has a conforming
+      declared authorization surface, and the conformance suite rejects a
+      context-free allow-all adapter. A later Phase 1A admission path must
+      reject any backend selected for an enforced agent without that surface.
 - [ ] Shadow evaluation emits only bounded selected-runtime surface metadata;
       it never logs memory content, prompts, queries, snippets, or raw
       principal identifiers, and does not claim to evaluate context-free policy